Overview · net-ssh/net-ssh · GitHub

Repository navigation

Security

Report a vulnerability

SECURITY.md

Security contact information

To report a security vulnerability, please use the GitHub private vulnerability reporting feature.

Using port forwarding silently enables server access to the local SSH agent | pkg:gem/net-ssh@8.0.0.beta3
GHSA-qpg5-fx6p-8cq3 published Oct 5, 2026 by mfazekas

High
net-ssh: SSH host-certificate authentication bypass — @cert-authority verifier skips valid_principals / validity window / cert type / critical options, so any CA-signed cert impersonates any host trusting that CA (CWE-295)
GHSA-vxj5-fg65-x765 published Oct 4, 2026 by mfazekas

High
Pre-auth unbounded transport packet_size leads to memory exhaustion
GHSA-pfqh-p9vh-wx4p published Oct 5, 2026 by mfazekas

Moderate
Pre-auth unbounded KEX packet queue leads to memory exhaustion
GHSA-ggxh-cfwq-5xqc published Oct 5, 2026 by mfazekas

Moderate
Pre-auth unbounded banner/identification buffering DoS
GHSA-r75w-7fhp-84w8 published Oct 5, 2026 by mfazekas

Moderate
parsing a specifically crafted ed25519 ssh key will lock net/ssh in DOS
GHSA-rpq3-v334-f5pm published Oct 5, 2026 by mfazekas

Moderate
Shell injection via unescaped substitution in ProxyCommand and ProxyJump command templates in net-ssh
GHSA-3x7f-q7wf-fp73 published Oct 5, 2026 by mfazekas

Moderate

Learn more about advisories related to net-ssh/net-ssh in the GitHub Advisory Database